$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa File: 1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa (raw, json) Hash identifier: ICdEzsf0USGFKq6nM99jKGXcmVwF0w937dYuBVrHq5o= Subject key identifier: F3:67:68:3C:A7:8A:03:A8:1F:F2:46:4B:9A:B0:A6:9B:B7:2E:54:27 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926E11B7DF18D2BAA84180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6e:11:b7:df:18:d2:ba:a8:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=4f8dfc20-bf29-4251-b95c-00f7e6e2818b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:db:f5:67:7a:61:f2:f0:94:cd:08:4d:e4: 41:54:aa:a5:1e:a8:1b:ee:92:e0:80:5a:90:0b:a5: bc:ca:af:08:f8:cb:e9:32:3d:ec:7b:86:4c:f4:c6: 85:aa:20:4b:0f:15:ca:3f:7f:5f:1f:be:0e:e6:ff: ee:29:15:15:49:2d:9c:27:77:67:52:89:7f:cc:2b: 93:82:27:33:30:17:d4:bb:bf:a1:a8:1c:ef:d4:7b: 13:b6:1e:d1:2b:d5:5d:a9:6f:1f:36:e7:9a:f4:a9: 65:24:b2:4c:fe:a8:ac:2c:c9:74:73:84:cf:13:76: 7c:d6:d6:50:2c:4a:ef:f0:31:39:93:ce:8d:ba:6d: 7b:bf:8e:3a:58:c0:d9:3e:f3:92:ce:32:b7:de:5a: 7b:d1:d6:95:d6:fa:0e:67:18:3e:13:fc:1e:38:4d: 27:1b:1d:dd:4a:a5:b7:e7:37:61:08:9a:f2:6e:03: 8d:7e:f4:ab:9b:61:a0:6f:5e:d1:23:37:69:2d:e6: 82:64:f5:de:d8:ce:1a:13:92:83:d2:3a:5c:5e:92: 5a:e0:0c:14:1f:06:b1:d3:c3:f2:23:8b:1f:de:a3: 40:92:6d:8e:99:9b:d5:86:01:de:62:9b:28:67:de: ba:6b:81:83:87:60:5b:cd:b5:a8:f2:80:14:cf:e0: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:67:68:3C:A7:8A:03:A8:1F:F2:46:4B:9A:B0:A6:9B:B7:2E:54:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b3:d8:6b:72:b5:7b:2d:ed:07:1d:30:4c:bb:b1:33:79:c8: 34:8a:e3:30:ad:df:d7:d6:5f:5b:ba:52:87:66:1d:6f:8c:c7: 04:e6:0d:85:fb:3a:60:e1:7d:01:0e:50:04:ab:4b:db:9d:a9: f9:65:78:5c:a3:cf:92:13:41:83:fb:37:5b:78:e5:ba:46:96: 21:dd:ae:2e:77:65:95:78:44:ee:27:96:3b:38:64:d8:8a:5c: fe:4c:5b:02:ee:66:5b:86:44:be:68:8c:e3:1b:a5:94:30:92: b2:72:ad:9e:f5:b3:69:9e:73:bc:77:b7:06:41:ce:40:56:b4: e8:d1:48:bd:89:77:3c:8b:26:55:62:14:b6:66:48:c7:f1:3b: 1f:88:2b:41:ff:1a:69:95:f7:a8:5a:ea:fa:06:bd:85:e9:cc: f4:2f:a2:5e:bf:9a:09:f7:50:a4:d0:1d:c0:ad:79:00:b9:e3: 70:4c:79:65:2a:8f:49:52:40:ad:93:6e:12:91:4d:45:aa:6c: 99:ac:c4:f8:bf:a1:14:e9:b0:ad:02:89:3f:3f:7a:4d:da:39: b0:90:72:46:f4:a7:60:54:c0:15:41:6d:81:5d:75:65:10:9c: 9f:e6:53:78:e4:fb:2d:77:87:6d:c0:4a:b6:be:ad:89:25:bc: a0:0b:89:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm4Rt98Y0rqoQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NGY4ZGZjMjAtYmYyOS00MjUxLWI5NWMtMDBmN2U2ZTI4MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdrb9Wd6YfLwlM0ITeRBVKqlHqgb7pLggFqQ C6W8yq8I+MvpMj3se4ZM9MaFqiBLDxXKP39fH74O5v/uKRUVSS2cJ3dnUol/zCuT giczMBfUu7+hqBzv1HsTth7RK9VdqW8fNuea9KllJLJM/qisLMl0c4TPE3Z81tZQ LErv8DE5k86Num17v446WMDZPvOSzjK33lp70daV1voOZxg+E/weOE0nGx3dSqW3 5zdhCJrybgONfvSrm2Ggb17RIzdpLeaCZPXe2M4aE5KD0jpcXpJa4AwUHwax08Py I4sf3qNAkm2OmZvVhgHeYpsoZ966a4GDh2BbzbWo8oAUz+Cf6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNnaDynigOoH/JGS5qwppu3LlQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU0OWU2MzEtZDYxMy0z YTZmLWEzZTQtZGNlOWQ4Njk4ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSz2GtytXst7QcdMEy7sTN5yDSK4zCt39fWX1u6UodmHW+MxwTmDYX7 OmDhfQEOUASrS9udqflleFyjz5ITQYP7N1t45bpGliHdri53ZZV4RO4nljs4ZNiK XP5MWwLuZluGRL5ojOMbpZQwkrJyrZ71s2mec7x3twZBzkBWtOjRSL2JdzyLJlVi FLZmSMfxOx+IK0H/GmmV96ha6voGvYXpzPQvol6/mgn3UKTQHcCteQC543BMeWUq j0lSQK2TbhKRTUWqbJmsxPi/oRTpsK0CiT8/ek3aObCQckb0p2BUwBVBbYFddWUQ nJ/mU3jk+y13h23ASra+rYklvKALiSQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:19 2025 by rpki-client